Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25658b04-6f82-3704-9032-9f037c2e3082.roa
File:                     25658b04-6f82-3704-9032-9f037c2e3082.roa (raw, json)
Hash identifier:          9m6GU2JoH0Gwu5JrMHp7xPFxjlgHbS15U7mCDYQu7h8=
Subject key identifier:   5B:3C:27:AB:A8:13:D8:2A:B7:97:00:1A:7E:68:21:AD:09:80:19:AF
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F31E499F07CFB9BC3B880DAC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25658b04-6f82-3704-9032-9f037c2e3082.roa
Signing time:             Fri 09 Sep 2022 12:00:00 +0000
ROA not before:           Fri 09 Sep 2022 12:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        76.238.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:31:e4:99:f0:7c:fb:9b:c3:b8:80:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Sep  9 12:00:00 2022 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=0ebe7487-8b58-4d14-8396-7eca9fc44a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:1a:cf:28:43:a7:0a:9e:42:5f:4d:76:8e:
                    68:98:a1:f9:1e:e0:c1:93:22:14:f1:32:43:b8:46:
                    c1:f3:36:11:70:0f:71:61:23:f2:cf:bd:98:4f:93:
                    2e:bb:1f:f1:86:bf:74:44:95:ba:d7:29:3b:f9:76:
                    27:8e:72:d7:3b:f7:0a:a9:d9:c7:92:11:50:1a:a2:
                    16:f3:12:dc:84:4d:85:5f:2d:8e:8f:56:2c:7d:62:
                    f8:50:83:9c:01:8a:85:43:a3:f8:28:01:11:13:b1:
                    d3:b1:da:4b:33:e3:4c:63:2c:cf:c7:dd:44:b6:58:
                    3b:e0:a2:5f:e1:6e:7d:2f:b6:98:17:06:a1:76:7a:
                    a5:dc:5a:8a:e1:c3:a7:68:70:74:db:3e:4b:f6:3f:
                    0f:4e:b8:86:75:57:2c:70:27:84:42:e2:2c:c6:ec:
                    89:00:15:58:22:cf:72:ee:2a:ba:78:55:c7:97:d5:
                    77:da:88:36:d7:72:db:8a:7c:54:fe:5b:a2:18:23:
                    e9:e7:0f:aa:4b:c6:7a:99:5a:c2:99:d4:c1:a4:29:
                    1e:2c:ac:69:af:3e:1a:03:2d:ed:e6:3f:7c:f6:e4:
                    5b:67:71:35:52:7a:7a:9b:3e:a9:38:d8:65:48:5d:
                    74:08:0e:00:47:11:46:ee:c1:3b:68:43:9a:15:c8:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3C:27:AB:A8:13:D8:2A:B7:97:00:1A:7E:68:21:AD:09:80:19:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25658b04-6f82-3704-9032-9f037c2e3082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.238.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:17:47:94:6f:ed:50:bd:50:95:fb:d1:5f:52:f7:0e:14:a6:
         5d:65:f1:14:16:2e:bc:70:07:41:12:92:db:fe:f0:10:9f:8d:
         c1:eb:d4:a2:59:46:d2:67:fd:d1:6e:92:4e:7f:bd:8f:e3:69:
         48:55:29:b5:3e:d3:ac:15:4c:d7:5e:bf:c7:42:8a:6e:f4:3d:
         0c:67:ca:11:09:83:4b:a1:34:da:5b:65:2d:8e:49:f6:79:8b:
         2c:a6:ad:a7:9d:fc:ce:38:27:95:27:1e:ca:da:21:c5:82:4c:
         6f:4e:01:79:9b:1d:80:c6:78:b0:e1:bf:15:98:1f:46:51:26:
         43:40:48:16:58:56:87:87:bc:8a:08:1c:73:33:d5:24:ce:da:
         6f:72:2f:8b:1c:86:45:c2:76:80:80:33:53:31:d8:8e:2a:82:
         20:28:1e:16:4f:61:97:eb:b4:36:0e:6a:17:31:49:5f:ab:f9:
         49:67:06:1c:a3:32:0f:dc:4b:b6:68:c1:5b:72:2e:73:65:50:
         3f:22:52:10:cb:37:fa:ad:78:32:39:50:9b:b0:5a:5b:c9:27:
         c9:14:c4:b4:ae:9f:3a:ab:d5:87:e2:45:3d:10:70:6a:08:71:
         16:f5:03:1a:bd:cd:d9:f4:25:8f:c5:99:ab:e8:7e:aa:41:f3:
         57:b0:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:22:16 2025 by rpki-client